DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ec6442f85079f4e5a88f7c11291a65f6_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ec6442f85079f4e5a88f7c11291a65f6_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ec6442f85079f4e5a88f7c11291a65f6_JaffaCakes118
Size
167KB
MD5
ec6442f85079f4e5a88f7c11291a65f6
SHA1
7cb794cf757ff776d9bdf615b404adee37ffd93b
SHA256
c3db49ecc9ce7cac05b75d281d694c24feae6869e0a8cb9dbbf45ace643d1f73
SHA512
e10514c05e886bdb68e3c6514fa39c1c885b6cfcd6d2af55e54bb6d939fb57fcdf8b303c0d9f0572d9f2c1cb175fcc4e827ba5fc04b7126a288e46a0f0a64f7c
SSDEEP
3072:lmlUtBo8dOLalbljBd0ghmDkL5/DYS8lIVWsdOLa:IlUY8MalpBd0ghl5/DYAnMa
Checks for missing Authenticode signature.
resource |
---|
ec6442f85079f4e5a88f7c11291a65f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE